Threat Database Backdoors Trojan.Apmod

Trojan.Apmod

By Sumo3000 in Backdoors

Trojan.Apmod is a dangerous backdoor Trojan infection that functions on the Apache Web server and host corrupt websites. Trojan.Apmod is responsible for propagating unwanted software programs and other forms of malware infections by using the Internet. Once corrupted by Trojan.Apmod, it can potentially attack web servers and host illegitimate contents on the servers. Trojan.Apmod requests for websites and injects a malicious iframe tag. Trojan.Apmod downloads and executes corrupt files. Trojan.Apmod can flood the affected computer with unlimited fake advertisements and annoying pop-up alerts.

File System Details

Trojan.Apmod may create the following file(s):
# File Name Detections
1. %AllUsersProfile%\.exe
2. %AllUsersProfile%\.dll
3. %AllUsersProfile%\Application Data\.exe
4. %AllUsersProfile%\Application Data\.dll
5. %AllUsersProfile%\~
6. %UserProfile%\Desktop\Trojan.Apmod.lnk
7. %AllUsersProfile%\Application Data\~
8. %UserProfile StartMenu\Programs\Trojan.Apmod\
9. %UserProfile%\Start Menu\Programs\Trojan.Apmod\Uninstall Trojan.Apmod.lnk
10. %AllUsersProfile%\Application Data\~r
11. %AllUsersProfile%\~r
12. %UserProfile%\Start Menu\Programs\Trojan.Apmod\Trojan.Apmod.lnk

Registry Details

Trojan.Apmod may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ".exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'yes'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ""
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop “NoChangingWallPaper” = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = '0'

Trending

Most Viewed

Loading...